Skip to Content.
Sympa Menu

mace-opensaml-users - Re: [OpenSAML] Use of AssertionIDRequest

Subject: OpenSAML user discussion

List archive

Re: [OpenSAML] Use of AssertionIDRequest


Chronological Thread 
  • From: rangeli nepal <>
  • To:
  • Subject: Re: [OpenSAML] Use of AssertionIDRequest
  • Date: Mon, 22 Feb 2010 09:32:03 -0500
  • Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; b=w6vGUW/BjQuhVj4vIgEKNBoWSFjKa0OwCRw0gf6Zu/JrSAoLzeDTpzGCtkaAtxJkwA yKjgOwtf6CU0li2n7q8Q8T2NknXKIkTBtnmjX3zGLy1P1WQZXxjeshYkDlf07/bbnv7p yPpO27Fshohr0TTMiPb6fKSrAe7wcW5lA22+c=

Thank you Scott and Chad. Source of my confusion is in specification itself. I am going throuhg saml-binding-2.0. In section 3.7
it says

"URIs are a protocol-independent means of referring to a resource. This binding is not a general SAML
request/response binding, but rather supports the encapsulation of a <samlp:AssertionIDRequest>
message with a single <saml:AssertionIDRef> into the resolution of a URI. The result of a successful
request is a SAML <saml:Assertion> element (but not a complete SAML response)."

I thought this means I need to retrieve Assertion using AssertionIDRequest. Currently way I get AssertionIDRef is under saml2:Advice.

am I missing something?
Thank you.
rnĀ 


On Sun, Feb 21, 2010 at 7:36 PM, Scott Cantor <> wrote:
rangeli nepal wrote on 2010-02-21:
> use case is, when I login I get a saml document with assertionid based uri
> binding. Now I need to get assertion using the assertiond that I received
in
> previous step. I was thinking to to use AssertionIDRequest.

The URI binding has no request message, it's a binding to dereference a URI
into an assertion directly.

-- Scott






Archive powered by MHonArc 2.6.16.

Top of Page